434 matches found
pragueinformationservices.com Cross Site Scripting vulnerability OBB-3446555
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware
The North Korean advanced persistent threat APT group known as Kimsuky has been observed using a piece of custom malware called RandomQuery as part of a reconnaissance and information exfiltration operation. "Lately, Kimsuky has been consistently distributing custom malware as part of...
North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware
The North Korean advanced persistent threat APT group known as Kimsuky has been observed using a piece of custom malware called RandomQuery as part of a reconnaissance and information exfiltration operation. "Lately, Kimsuky has been consistently distributing custom malware as part of...
SUSE CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services NSS 3.12.4 and earlier, multiple Cis...
SUSE CVE-2010-3332
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services IIS, provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State aka VIEWSTATE for...
Veeam One Web Client / Reporter: Access Denied Error
Challenge When attempting to access the Veeam ONE Web Client, formerly known as Veeam ONE Reporter, the following error is shown on the login page: Veeam ONE Web Client Error Access denied Here is what you can do: Go Home Error Variant 1 Error Variant 2 Cause The Internet Information Services IIS...
CVE-2022-42136
Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had permission to access. That action, could lead an attacker to store arbitrary code on that files and execute RCE commands...
PT-2023-14065 · Mailenable · Mailenable
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows authenticated mail users, under specific circumstances, to add files with unsanitized content in public folders where the IIS user had...
SQL Injection Vulnerability in the Integrated Management System of River Management System of Sichuang Technology Co.
Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the integrated river management system of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from the database...
Microsoft Windows Internet Information Services 安全漏洞
Microsoft Windows Internet Information Services IIS is a Web server for the Windows Server platform from Microsoft, USA. A security vulnerability exists in Microsoft Windows Internet Information Services. The following products and versions are affected:Windows Server 2022,Windows Server 2022...
The vulnerability of the Microsoft Internet Information Services (IIS) Server network services on the Windows operating system allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft Internet Information Services IIS Server network services on the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Internet Information Server (IIS) on Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Internet Information Server IIS on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Cachuri module in the Microsoft Internet Information Services (IIS) network services for Windows operating systems allows a hacker to cause a service failure.
The vulnerability of the Cachuri module in the Microsoft Internet Information Services IIS network services for Windows operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
CVE-2022-30209
Windows IIS Server Elevation of Privilege Vulnerability...
CVE-2022-30209
Windows IIS Server Elevation of Privilege Vulnerability...
CVE-2022-22025
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability...
CVE-2022-22040
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
CVE-2022-22025
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability...